Showing 1 - 13 of 13

Files from Nicolas Chatelain

Unraid 6.8.0 Authentication Bypass / Arbitrary Code Execution: Posted Apr 17, 2020; Authored by Nicolas Chatelain | Site metasploit.com; This Metasploit module exploits two vulnerabilities affecting Unraid 6.8.0. An authentication bypass is used to gain access to the administrative interface, and an insecure use of the extract PHP function can be abused for arbitrary code execution as root.; tags | exploit, arbitrary, root, php, vulnerability, code execution; advisories | CVE-2020-5847, CVE-2020-5849; MD5 | 66f62527f36bfb07368dcaf7a3f1185b; Download | Favorite | View

UCOPIA Wireless Appliance Privilege Escalation: Posted Sep 29, 2017; Authored by Nicolas Chatelain; UCOPIA Wireless Appliance version prior to 5.1.8 suffer from a chroot escape privilege escalation vulnerability.; tags | exploit; advisories | CVE-2017-11322; MD5 | 4ac33134dd66fc8aab143af5f4127cc1; Download | Favorite | View

UCOPIA Wireless Appliance Restricted Shell Escape: Posted Sep 29, 2017; Authored by Nicolas Chatelain; UCOPIA Wireless Appliance version prior to 5.1.8 suffer from a restricted shell escape vulnerability.; tags | exploit, shell; advisories | CVE-2017-11321; MD5 | d7ec758fffa0347a2564b5cb077d8709; Download | Favorite | View

SPIP 3.1.2 Server Side Request Forgery: Posted Oct 20, 2016; Authored by Nicolas Chatelain; SPIP versions 3.1.2 and below suffer from a server-side request forgery vulnerability.; tags | exploit; advisories | CVE-2016-7999; MD5 | 6c3e48e6ba9437d4988acd3024f8d24c; Download | Favorite | View

SPIP 3.1.2 Template Compiler / Composer PHP Code Execution: Posted Oct 20, 2016; Authored by Nicolas Chatelain; SPIP versions 3.1.2 and below suffer from a PHP code execution vulnerability.; tags | exploit, php, code execution; advisories | CVE-2016-7998; MD5 | 55991565e09ceb72a42ec7723d003821; Download | Favorite | View

SPIP 3.1.2 File Enumeration / Path Traversal: Posted Oct 20, 2016; Authored by Nicolas Chatelain; SPIP versions 3.1.2 and below suffer from file enumeration and path traversal vulnerabilities.; tags | exploit, vulnerability, file inclusion; advisories | CVE-2016-7982; MD5 | bae4a4e262a99a0a5ab3ceb300de95e6; Download | Favorite | View

SPIP 3.1.2 Cross Site Scripting: Posted Oct 19, 2016; Authored by Nicolas Chatelain; SPIP versions 3.1.2 and below suffer from a cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2016-7981; MD5 | 19ea0f9a054fa2b4f4dad9b9c2ec1e08; Download | Favorite | View

SPIP 3.1.2 Cross Site Request Forgery: Posted Oct 19, 2016; Authored by Nicolas Chatelain; SPIP versions 3.1.2 and below suffer from a cross site request forgery vulnerability.; tags | exploit, csrf; advisories | CVE-2016-7980; MD5 | 2507f46ecb88e872b16a350dcfd71b5d; Download | Favorite | View

Centreon Web Interface 2.5.3 Command Execution: Posted Jul 27, 2016; Authored by h00die, Nicolas Chatelain | Site metasploit.com; Centreon Web Interface versions 2.5.3 and below utilize an ECHO for logging SQL errors. This functionality can be abused for arbitrary code execution, and can be triggered via the login screen prior to authentication.; tags | exploit, web, arbitrary, code execution; MD5 | 68342f19a17e66cc296e79e67f86c303; Download | Favorite | View

WordPress iThemes Security Insecure Backup / Logfile Generation: Posted Apr 21, 2016; Authored by Nicolas Chatelain; WordPress iThemes Security suffers from insecure backup and logfile generation vulnerabilities.; tags | exploit, vulnerability; MD5 | 0a72248fec890cb6ef88cbe6f6554721; Download | Favorite | View

Netgear ReadyNAS Remote Code Execution: Posted Mar 12, 2016; Authored by Nicolas Chatelain; Netgear ReadyNAS suffers from a remote root code execution vulnerability.; tags | exploit, remote, root, code execution; MD5 | 89ed23e4ac469a7fa5cb9e6721cc2aeb; Download | Favorite | View

Proxmox VE 3 / 4 XSS / Privilege Escalation / Code Execution: Posted Feb 27, 2016; Authored by Nicolas Chatelain; Proxmox VE versions 3 and 4 suffers from privilege escalation, code execution, and cross site scripting vulnerabilities.; tags | exploit, vulnerability, code execution, xss; MD5 | 7bf79fb1f827a09a146b676a1cc4f9e0; Download | Favorite | View

Centreon 2.5.3 Code Execution: Posted Feb 26, 2016; Authored by Nicolas Chatelain; Centreon versions 2.5.3 and below suffer from a remote code execution vulnerability.; tags | exploit, remote, code execution; MD5 | 40b9869aaae9701f0648ec3012fe5f27; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days